$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: L5r6D4otx83j9lXQ06uuvOUUY8q/CdWGTmmM4M9g23M= Subject key identifier: 0C:1E:1B:AC:7D:16:C2:F6:12:90:FF:FA:97:97:E7:4E:9E:F6:19:CD Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 51C328B7EEFF58DEBCF8477B0B27CDE6B9AF6774 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:14:51 +0000 Manifest this update: Tue 12 May 2026 15:09:51 +0000 Manifest next update: Wed 13 May 2026 17:43:51 +0000 Files and hashes: 1: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) 2: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: yTe9Se6Sbh2YRr9GYM88xTIgRKJQxLeguDwPCQ093gU=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c3:28:b7:ee:ff:58:de:bc:f8:47:7b:0b:27:cd:e6:b9:af:67:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: May 12 15:09:51 2026 GMT Not After : May 13 17:43:51 2026 GMT Subject: CN=0C1E1BAC7D16C2F61290FFFA9797E74E9EF619CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:94:63:ff:75:5e:aa:92:37:90:9a:09:9e:c3: 5c:79:0b:70:51:9a:e0:d5:48:25:7a:19:7c:94:6c: 0a:7f:e4:a8:03:4a:c2:6c:ce:f0:93:d3:96:2c:a0: eb:19:cb:2a:d9:e7:00:71:3f:cd:02:43:c1:c6:d0: 28:4a:f7:fd:dc:5e:d0:c5:e3:21:50:c3:d5:8d:0c: 5d:3c:03:8e:28:f0:5c:47:10:88:7c:88:b5:d4:d0: 96:ff:d1:a2:01:c3:e6:f8:7f:df:7c:06:83:21:37: 38:49:0c:de:71:9c:fe:38:08:e0:74:7d:f5:7a:d9: c3:a8:a8:48:ba:49:5c:f0:df:f2:0a:8a:84:a9:68: 61:6a:7e:28:a6:b3:a3:55:91:22:97:81:a6:78:e0: f0:1c:01:20:c4:27:0f:7e:82:f5:9f:d8:41:6a:02: b7:99:da:c6:1c:b9:1f:50:fd:69:47:b5:b6:4a:59: aa:b5:25:f7:49:e5:ab:57:3d:6b:d5:e3:ed:f2:0a: b3:b1:20:53:f9:7a:d7:ae:49:fb:9e:96:20:79:6d: f2:21:aa:9f:eb:3e:30:0a:96:82:1b:4a:02:64:c8: 16:8b:9e:d0:da:b4:61:fb:65:c7:46:6b:f7:d0:a8: 5b:43:13:a7:c6:2d:35:bc:3c:82:67:35:d2:f6:75: f2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1E:1B:AC:7D:16:C2:F6:12:90:FF:FA:97:97:E7:4E:9E:F6:19:CD X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:29:4b:19:78:d0:b5:5e:49:e0:b4:15:08:31:b5:94:03:71: e1:2e:21:87:54:42:81:73:c1:d5:d3:74:67:1d:96:66:f8:6e: ad:1f:c3:2d:8c:61:8e:28:02:1d:44:93:c1:f7:d3:e3:79:b0: 9b:97:98:93:cd:9a:03:5d:fb:e9:f7:64:2d:dc:73:28:32:ba: 63:8f:9f:83:ec:a4:7a:45:f2:2e:4b:79:96:9f:17:6b:0c:56: 37:ee:2c:93:04:71:f9:af:f3:c6:49:d1:b7:97:0d:a1:af:fa: e4:e7:9b:c4:8d:96:4c:d0:3a:d8:29:73:22:24:dd:d5:03:8c: ec:74:d2:d9:16:38:59:3d:18:24:86:92:4e:db:b8:e0:2a:b7: 18:b3:2a:ba:18:48:21:d6:5c:23:c1:e5:e1:5d:f9:e5:fc:58: f9:67:3d:e0:ef:b3:5b:b7:8e:47:ca:ef:f8:ba:85:ea:d3:57: 24:80:f1:f3:2f:d3:59:23:ce:7a:45:0a:41:3e:c5:be:64:43: a4:35:91:fb:28:42:9e:54:e0:1c:fa:31:5e:e5:03:5c:14:cb: bb:49:5c:d3:d7:50:84:9c:d0:05:98:b4:bc:07:e7:12:b1:ac: 77:7e:0f:63:6b:25:f6:37:19:1e:74:78:5b:3a:bd:ea:5d:f6: ff:37:dd:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcMot+7/WN68+Ed7CyfN5rmvZ3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjA1MTIxNTA5NTFaFw0yNjA1MTMxNzQzNTFaMDMxMTAvBgNV BAMTKDBDMUUxQkFDN0QxNkMyRjYxMjkwRkZGQTk3OTdFNzRFOUVGNjE5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjlGP/dV6qkjeQmgmew1x5C3BR muDVSCV6GXyUbAp/5KgDSsJszvCT05YsoOsZyyrZ5wBxP80CQ8HG0ChK9/3cXtDF 4yFQw9WNDF08A44o8FxHEIh8iLXU0Jb/0aIBw+b4f998BoMhNzhJDN5xnP44COB0 ffV62cOoqEi6SVzw3/IKioSpaGFqfiims6NVkSKXgaZ44PAcASDEJw9+gvWf2EFq AreZ2sYcuR9Q/WlHtbZKWaq1JfdJ5atXPWvV4+3yCrOxIFP5eteuSfueliB5bfIh qp/rPjAKloIbSgJkyBaLntDatGH7ZcdGa/fQqFtDE6fGLTW8PIJnNdL2dfJFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDB4brH0WwvYSkP/6l5fnTp72Gc0wHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3Nzcx OTQ2RTIxNTJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEpSxl40LVeSeC0FQgxtZQDceEuIYdUQoFz wdXTdGcdlmb4bq0fwy2MYY4oAh1Ek8H30+N5sJuXmJPNmgNd++n3ZC3ccygyumOP n4PspHpF8i5LeZafF2sMVjfuLJMEcfmv88ZJ0beXDaGv+uTnm8SNlkzQOtgpcyIk 3dUDjOx00tkWOFk9GCSGkk7buOAqtxizKroYSCHWXCPB5eFd+eX8WPlnPeDvs1u3 jkfK7/i6herTVySA8fMv01kjznpFCkE+xb5kQ6Q1kfsoQp5U4Bz6MV7lA1wUy7tJ XNPXUISc0AWYtLwH5xKxrHd+D2NrJfY3GR50eFs6vepd9v833dE= -----END CERTIFICATE-----Generated at Wed May 13 00:13:53 2026 by rpki-client